Hirschmann GREYHOUND GRS1020 - Page 133

Network Security
[ Network Security > DoS > Global ]
132
RM GUI GRS
Release
8.0 09/2019
Possible values:
 marked
The filter is active.
 unmarked (default setting)
The filter is inactive.
TCP Offset protection
Activates/deactivates the TCP Offset protection.
The TCP Offset protection detects incoming TCP data packets whose fragment offset field of the
IP header is equal to 1 and discards them.
The TCP Offset protection accepts UDP and ICMP packets whose fragment offset field of the IP
header is equal to 1.
Possible values:
 marked
The protection is active.
 unmarked (default setting)
The protection is inactive.
TCP SYN protection
Activates/deactivates the TCP SYN protection.
The TCP SYN protection detects incoming data packets with the TCP flag SYN set and a L4 source
port <1024 and discards them.
Possible values:
 marked
The protection is active.
 unmarked (default setting)
The protection is inactive.
L4 Port protection
Activates/deactivates the L4 Port protection.
The L4 Port protection detects incoming TCP and UDP data packets whose source port number
and destination port number are identical and discards them.
Possible values:
 marked
The protection is active.
 unmarked (default setting)
The protection is inactive.
Min. Header Size filter
Activates/deactivates the Minimal Header filter.
The Minimal Header filter compares the TCP header of incoming data packets. If the data offset
value multiplied by 4 is smaller than the minimum TCP header size, then the filter discards the data
packet.